CWE-416 Use After Free
variantThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (12095)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-68820US | —OT kritisch | KEV | ||
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-5281US | —OT kritisch | KEV | ||
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page… | ||||
| CVE-2026-2441US | high8.8OT kritisch | KEV | ||
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever… | ||||
| CVE-2025-43529US | —OT kritisch | KEV | ||
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2,… | ||||
| CVE-2025-62221US | —OT kritisch | KEV | ||
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2023-43000US | high8.8OT kritisch | KEV | ||
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7… | ||||
| CVE-2025-48543US | —OT kritisch | KEV | ||
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege wi… | ||||
| CVE-2025-27038US | —OT kritisch | KEV | ||
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. | ||||
| CVE-2025-32709US | —OT kritisch | KEV | ||
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-32701US | —OT kritisch | KEV | ||
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-30400US | —OT kritisch | KEV | ||
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-29824US | —OT kritisch | KEV | ||
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-24983US | —OT kritisch | KEV | ||
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-24085US | critical10.0OT kritisch | KEV | ||
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS… | ||||
| CVE-2025-21335US | —OT kritisch | KEV | ||
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | ||||
| CVE-2025-21334US | —OT kritisch | KEV | ||
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability | ||||
| CVE-2024-9680US | critical9.8OT kritisch | KEV | ||
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploit… | ||||
| CVE-2024-43047US | —OT kritisch | KEV | ||
Memory corruption while maintaining memory maps of HLOS memory. | ||||
| CVE-2024-38193US | —OT kritisch | KEV | ||
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||||
| CVE-2024-38107US | —OT kritisch | KEV | ||
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability | ||||
03
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan